This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: QizTPGXOhOjSrpujNnWrPADv5v7jzQQNrgxqTv7aZFU= Subject key identifier: FD:D8:73:C6:65:B3:5C:D5:6F:1B:C7:AA:2B:CE:F7:F3:6C:2E:7F:B2 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 1857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 1842 Signing time: Sat 20 Dec 2025 16:18:34 +0000 Manifest this update: Sat 20 Dec 2025 16:18:34 +0000 Manifest next update: Sat 27 Dec 2025 16:18:34 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: EHYu1qWLemapPAPcqBpy39rki3+U8IvBdFIukaFLVUU=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: QjWbiFJAMwmBAEMY1qS6fhF8PiRDmATsLV7gaqED+dA=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: kpwpM+xpk8U22mtjo8dxh920QIvbJsAopAqetejoueY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6231 (0x1857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: Dec 20 16:18:34 2025 GMT Not After : Dec 27 16:18:34 2025 GMT Subject: CN=6946cc5a-6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:dd:85:34:e9:e1:33:87:ab:97:6c:57:21: 52:84:37:7e:f8:35:43:ab:66:f1:f9:c0:d4:e2:87: 2a:98:ed:cf:54:26:94:29:4b:97:0a:55:2e:56:8b: ff:85:a8:d4:34:40:f5:a3:5c:17:7b:b9:b7:6c:1b: bb:3d:f2:fe:22:58:bf:0a:09:f8:b4:eb:75:65:42: ae:e1:b1:e8:32:03:e3:56:6c:85:b0:7b:73:58:72: b5:af:5f:41:0a:09:38:50:a5:07:59:0f:46:b7:cf: 66:6e:1a:ac:cc:a3:29:f6:e2:43:46:e4:92:95:1b: f9:18:da:67:75:d2:04:9f:6c:0c:da:88:8c:58:04: 16:fb:e9:5f:ab:af:f5:0f:49:86:3c:9c:87:4a:a1: af:b5:f4:0d:87:e4:bc:54:3d:8c:6d:14:46:59:40: b3:5b:e0:8d:0e:79:54:31:9d:01:06:d9:30:52:98: 0b:f3:f3:27:5e:9b:7d:87:8a:fb:08:72:17:71:b9: 51:84:70:47:aa:54:4f:f7:db:ca:e8:34:db:f4:2d: 68:a8:26:12:ff:7e:9a:45:20:b0:96:fa:f7:59:ac: fb:f7:98:fb:fa:2c:f2:c7:bb:f2:f8:23:09:9c:0d: 00:9a:19:32:6e:f4:be:e4:92:df:f0:b8:65:4c:62: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:73:C6:65:B3:5C:D5:6F:1B:C7:AA:2B:CE:F7:F3:6C:2E:7F:B2 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:95:f4:60:b1:4c:ce:17:10:c3:a7:2b:b3:bc:7b:b5:e8:b0: 87:98:eb:74:e8:c7:63:3d:7a:83:d2:07:98:39:19:ba:1b:cb: 0b:54:f7:e9:84:d1:bd:9d:00:1d:75:fd:26:c2:e5:8e:a5:ef: eb:60:12:c5:ef:45:47:15:34:e0:9a:38:0b:29:a4:78:7a:41: 50:6f:8a:07:2d:8b:10:75:17:72:17:1d:80:17:32:92:64:72: 77:e9:10:54:b1:03:3c:26:d7:4c:b5:b8:ff:0c:99:51:40:f2: 2b:9e:0e:97:ab:ef:83:89:25:fe:45:db:8a:9f:b3:6e:4c:38: de:72:9e:b0:8a:98:9b:7f:b3:4e:70:71:08:4e:aa:15:8f:56: ab:e0:0d:5e:97:03:83:16:27:9f:87:c5:84:1c:eb:76:c9:e2: 3c:94:04:08:63:6a:ec:3b:2a:7e:bd:7f:d7:3c:ba:29:e6:ad: d9:81:ae:01:fb:23:f6:7f:e8:e0:1e:01:c3:a5:6d:e3:46:4e: fd:7e:ff:90:88:d8:b6:b8:9d:99:66:10:b2:3b:6e:35:54:f5: 05:ad:63:d8:52:f4:2f:c8:0a:1d:23:5c:c0:85:bf:22:d6:87: d1:33:e8:3a:2c:c8:fa:1c:30:a3:e8:8a:c6:cf:77:ef:03:dc: 17:c0:3f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjUxMjIwMTYxODM0WhcNMjUxMjI3MTYxODM0WjAYMRYwFAYD VQQDDA02OTQ2Y2M1YS02MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNfdhTTp4TOHq5dsVyFShDd++DVDq2bx+cDU4ocqmO3PVCaUKUuXClUuVov/ hajUNED1o1wXe7m3bBu7PfL+Ili/Cgn4tOt1ZUKu4bHoMgPjVmyFsHtzWHK1r19B Cgk4UKUHWQ9Gt89mbhqszKMp9uJDRuSSlRv5GNpnddIEn2wM2oiMWAQW++lfq6/1 D0mGPJyHSqGvtfQNh+S8VD2MbRRGWUCzW+CNDnlUMZ0BBtkwUpgL8/MnXpt9h4r7 CHIXcblRhHBHqlRP99vK6DTb9C1oqCYS/36aRSCwlvr3Waz795j7+izyx7vy+CMJ nA0AmhkybvS+5JLf8LhlTGJoSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3Yc8Zl s1zVbxvHqivO9/NsLn+yMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXlfRgsUzOFxDDpyuzvHu16LCHmOt06MdjPXqD0geYORm6G8sLVPfp hNG9nQAddf0mwuWOpe/rYBLF70VHFTTgmjgLKaR4ekFQb4oHLYsQdRdyFx2AFzKS ZHJ36RBUsQM8JtdMtbj/DJlRQPIrng6Xq++DiSX+RduKn7NuTDjecp6wipibf7NO cHEITqoVj1ar4A1elwODFiefh8WEHOt2yeI8lAQIY2rsOyp+vX/XPLop5q3Zga4B +yP2f+jgHgHDpW3jRk79fv+QiNi2uJ2ZZhCyO241VPUFrWPYUvQvyAodI1zAhb8i 1ofRM+g6LMj6HDCj6IrGz3fvA9wXwD99 -----END CERTIFICATE-----Generated at Sun Dec 21 01:34:49 2025 by rpki-client